CVE-2017-6206

The exploit consists of two Python scripts targeting D-Link devices. The first script retrieves user account information via an unauthenticated HTTP request, while the second adds a new admin user by exploiting an authentication bypass vulnerability.

This PoC exploits an authentication bypass vulnerability in D-Link DGS-1510 switches to add a new admin user without authentication. It includes scripts to retrieve user information and add a user via unauthenticated HTTP requests.

This repository contains functional exploit code for CVE-2017-6206, demonstrating an unauthenticated command bypass and information disclosure vulnerability in D-Link DGS-1510 Websmart switches. The exploit adds a new admin user without authentication.